SAE/TP 2011-01-2558 (PDF) Towards Cooperation of Formal Methods for the Analysis of Critical Control Systems